background image

Before You Begin

Upgrade/Downgrade Considerations for Firewalls and

Appliances

The following table lists all hardware features that have upgrade or downgrade impact. 

Make

sure you understand all upgrade/downgrade considerations before you upgrade or downgrade

from the specified version of PAN-OS.

Feature

Release

Upgrade Considerations

Downgrade

Considerations

PA-7000 Log

Forwarding Card (LFC)

10.0

If you are using an LFC

with a PA-7000 Series

Firewall, when you

upgrade to PAN-OS

10.0, you must configure

the management plane

or dataplane interface

for the service route

because the LFC ports

do not support the

requirements for the

service route. We

recommend using the

dataplane interface for

the Data Services service

route.

n/a

Upgrading a PA-7000

Series Firewall with a

first generation switch

management card

(PA-7050-SMC or

PA-7080-SMC)

PAN-OS 8.0

and later

Before upgrading

the firewall, run the

following CLI command

to check the flash drive’s

status: 

debug system

disk-smart-info

disk-1

.

If the value for

attribute ID #232,

Available_Reservd_Space

0x0000

, is greater than

20, then proceed with

the upgrade. If the value

is less than 20, then

contact support for

assistance.

Before downgrading

the firewall, run the

following CLI command

to check the flash drive’s

status: 

debug system

disk-smart-info

disk-1

.

If the value for

attribute ID #232,

Available_Reservd_Space

0x0000

, is greater than

20, then proceed with

the downgrade. If the

value is less than 20,

then contact support for

assistance.

PA-400R Series Next-Gen Firewall Hardware Reference

6

©

2023 Palo Alto Networks, Inc.

Summary of Contents for PA-400R Series

Page 1: ...PA 400R Series Next Gen Firewall Hardware Reference docs paloaltonetworks com...

Page 2: ...works com search html Have feedback or questions for us Leave a comment on any page in the portal or write to us at documentation paloaltonetworks com Copyright Palo Alto Networks Inc www paloaltonetw...

Page 3: ...PA 400R Series Firewall on a Wall 23 Install the PA 400R Series Firewall in an Equipment Rack 25 Set Up a Connection to the Firewall 28 Connect Power to a PA 400R Series Firewall 31 Prepare to Connec...

Page 4: ...Table of Contents PA 400R Series Next Gen Firewall Hardware Reference 4 2023 Palo Alto Networks Inc...

Page 5: ...Networks next generation firewall or appliance The following topics apply to all Palo Alto Networks firewalls and appliances except where noted Upgrade Downgrade Considerations for Firewalls and Appli...

Page 6: ...erface for the Data Services service route n a Upgrading a PA 7000 Series Firewall with a first generation switch management card PA 7050 SMC or PA 7080 SMC PAN OS 8 0 and later Before upgrading the f...

Page 7: ...atches the tracking number that is physically labeled on the box or crate The integrity of the tamper proof tape used to seal the box or crate is not compromised The integrity of the warranty label on...

Page 8: ...arty Component Support Before you consider installing third party hardware read the Palo Alto Networks Third Party Component Support statement PA 400R Series Next Gen Firewall Hardware Reference 8 202...

Page 9: ...hen applicable to ensure agency compliance with electromagnetic compliance EMC regulations French Translation Des c bles Ethernet blind s reli s la terre doivent tre utilis s pour garantir la conformi...

Page 10: ...entire fan tray This allows the fans to stop spinning and helps you avoid serious injury when removing the fan tray You can replace a fan tray while the firewall is powered on but you must replace it...

Page 11: ...ne barrette d un bus bornes de mise la terre auquel le conducteur lectrode de mise la terre du syst me d alimentation c c est raccord The firewall must be in the same immediate area such as adjacent c...

Page 12: ...ge AWG indiqu et serrez les crous au couple indiqu dans la proc dure d installation de votre pare feu pare feu The firewall permits the connection of the earthed conductor of the DC supply circuit to...

Page 13: ...sive and active active high availability HA and ZTP functionality The PA 400R firewalls enable you to secure your organization through advanced visibility and control of applications users and content...

Page 14: ...the firewall Bootstrapping enables you to provision the firewall with a specific PAN OS configuration and then license it and make it operational on your network 3 CONSOLE port Micro USB Use this port...

Page 15: ...nect to the console port Data rate 9600 Data bits 8 Parity none Stop bits 1 Flow control None 5 Management port Use this Ethernet 1Gbps port to access the management web interface and perform administ...

Page 16: ...to earth ground ground cable not included 9 DC power inputs Use the DC power inputs to connect power to the firewall A second power supply can be used for redundancy To view system firmware versions f...

Page 17: ...The following image shows the back panel of the PA 450R There are no serviceable components on the back panel To view system firmware versions for any of the PA 400R Series firewalls use the following...

Page 18: ...lure or hardware is overheating and the temperature is above the high temperature threshold Off The firewall is operating normally High Availability Green The firewall is the active peer in an active...

Page 19: ...on a port the LEDs on some activse ports will not work Similarly if the passive link state is set to shutdown the HA link LEDs on the passive device in the HA pair will not work To ensure your LEDs d...

Page 20: ...PA 400R Series Firewall Overview PA 400R Series Next Gen Firewall Hardware Reference 20 2023 Palo Alto Networks Inc...

Page 21: ...ns depending on their design The PA 450R ships with the hardware required to install the firewall in a 19 inch equipment rack or on a wall Install the PA 400R Series Firewall on a Flat Surface Install...

Page 22: ...ls have four circular feet on their bottom side that can be used to install the device in a horizontal position Keep the device clean and clear of dust to ensure optimal heat dissipation and maintain...

Page 23: ...ssipation and maintain proper hardware operation STEP 1 Mark the locations on the wall that line up with the wall mount holes on the bottom of the wall mount Ensure there are no building services wate...

Page 24: ...3 Attach the wall mount to the wall using four screws that are appropriate for your wall Sheet metal and drywall inserts are included with the wall mount kit PA 400R Series Next Gen Firewall Hardware...

Page 25: ...g rail Repeat for the second mounting rail The adjustable and fixed brackets are the same for the left and right side STEP 2 Align the bottom edge of the mounting rails to the bottom of the 1 RU 1 5 R...

Page 26: ...de STEP 6 Secure the firewall in place using three of the provided 6 32 x 3 16 Long Flathead screws STEP 7 Flip the mounting tray back into an upright position STEP 8 Follow the instructions to Connec...

Page 27: ...ipment frame Secure the mounting tray to the equipment frame on both sides using 3 screws each not provided The screws must be compatible with your equipment frame The above picture needs to be update...

Page 28: ...o Panorama The ZTP firewall is unable to connect to the Palo Alto Networks ZTP service to facilitate onboarding without a DHCP server ZTP mode is disabled if FIPS CC mode is enabled If the firewall bo...

Page 29: ...ng in standard mode ZTP mode Stand by as the firewall boots up STEP 5 Set up the firewall manually if using standard mode If using ZTP mode the device group and template configuration defined on the P...

Page 30: ...Install the PA 400R Series Firewall PA 400R Series Next Gen Firewall Hardware Reference 30 2023 Palo Alto Networks Inc...

Page 31: ...ered by DC power and support power redundancy Learn how to Set Up a Connection to the Firewall based on your desired boot mode prior to powering on the firewall for the first time Prepare to Connect P...

Page 32: ...cables Screwdrivers Use these tools to attach the ground cable and DC power cables use a Phillips head screwdriver for the screw on ground point and a small flat head screwdriver to secure cables to...

Page 33: ...e not included to the dual hole ground lug Connect the other end of the cable to earth ground Remove the two ground screws from the ground point on the front panel of the firewall Hold the ground lug...

Page 34: ...Connect Power to a PA 400R Series Firewall PA 400R Series Next Gen Firewall Hardware Reference 34 2023 Palo Alto Networks Inc...

Page 35: ...topics describe the PA 400R Series firewall hardware specifications For feature capacity and performance information refer to the datasheet Physical Specifications Electrical Specifications Environme...

Page 36: ...ical specifications Specification Value Rack units and dimensions PA 450R Height 8 78 Width 10 63 Depth 4 45 Height 22 3 cm Width 27 cm Depth 11 3 cm Rack units 1U Weight PA 450R Firewall weight 15 lb...

Page 37: ...n Value Power input The PA 400R Series firewalls operate on 12 48VDC power The firewall can operate on one power supply or you can install a second power supply for power redundancy Power consumption...

Page 38: ...o 158 F 40 to 70 C Non operating temperature PA 450R 40 F to 158 F 20 to 70 C Humidity tolerance 10 to 90 non condensing Airflow PA 450R The PA 400R Series firewalls use passive cooling and do not con...

Page 39: ...The following table describes PA 400 Series firewall miscellaneous specifications Specification Value Storage capacity PA 450R One 128 GB eMMC Mean time between failures MTBF 8 7 years PA 400R Series...

Page 40: ...PA 400R Series Firewall Specifications PA 400R Series Next Gen Firewall Hardware Reference 40 2023 Palo Alto Networks Inc...

Page 41: ...h the laws and regulations in each country where there are requirements applicable to our products Our products meet standards for product safety and electromagnetic compatibility when used for their...

Page 42: ...in voltage limits KCC This equipment is an electromagnetic compatible device for business purposes Class A The provider or user should be aware that the equipment is intended for use outside the home...

Page 43: ...the equipment and receiver Connect the equipment to an outlet on a circuit that is different from the one to which the receiver is connected Consult the dealer or an experienced radio TV technician fo...

Page 44: ...PA 400R Series Firewall Compliance Statements Overview PA 400R Series Next Gen Firewall Hardware Reference 44 2023 Palo Alto Networks Inc...

Reviews: